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Cross-Reference to Related Applications 

This application is a divisional of application number 10/253,049, filed September 
23, 2002 (pending), which is a divisional of application number 09/748,589, filed 
December 22, 2000 (pending), which is a continuation-in-part of U.S. Patent Application 
Serial Number 09/662,953, filed September 15, 2000 (now abandoned), each of which is 
incorporated by reference herein. 

Background 

Non-volatile memory is becoming standard in many data storage systems such as 
digital cameras and digital audio players. Modular, portable memory devices, such as 
flash memory devices, are available that can be readily connected to and disconnected 
from these systems. CD-based media is also used. Regardless of the type of memory 
device employed, data storage systems use a file system to control where data is located 
on the device and to interface with the device. Many data storage systems use the DOS 
FAT file system. Because the DOS FAT file system requires that the memory device be 
re-writeable, the DOS FAT file system is not preferred for write-once memory devices. 
While there are file systems designed for write-once memory devices, such as the 
ISO9660 file system used by CD-ROMs and the Universal Disk Format (UDF) used by 
Adaptec for multi-session CD-RWs, these file systems may not be suitable for certain 
applications. 

Summary 

The present invention is defined by the following claims, and nothing in this 
section should be taken as a limitation on those claims. 

By way of introduction, the preferred embodiments described below provide 
memory devices and methods for use therewith. In one preferred embodiment, a method 
is presented for using a file system to dynamically respond to variability in an indicated 
minimum number of memory cells of first and second write-once memory devices. In 
another preferred embodiment, a method for overwriting data in a memory device is 
described in which an error code is disregarded after a destructive pattern is written. In 



yet another preferred embodiment, a method is presented in which, after a block of 
memory has been allocated for a file to be stored in a memory device, available lines in 
that block are determined. Another preferred embodiment relates to reserving at least one 
memory cell in a memory device for file structures or file system structures. A memory 
device is also provided in which file system structures of at least two file systems are 
stored in the same memory partition. Additionally, methods for permanently preventing 
modification of data stored in a memory device and for identifying memory cells storing 
data are disclosed. 

It should be noted that the following preferred embodiments can be practiced with 
any suitable memory device and that the following claims should not be read as requiring 
a write-once memory device or a three-dimensional write-once memory device unless 
specifically recited. It should also be noted that any or all of the following embodiments 
can be used alone or in combination. 

The preferred embodiments will now be described with reference to the attached 
drawings. 

Brief Description of the Drawings 

Figure 1 is a block diagram of a data storage system and memory device of a 
preferred embodiment. 

Figure 2 is an illustration of a memory array of a preferred embodiment that is 
logically organized into lines, blocks, and partitions. 

Figure 3 is a block diagram of a data storage system and first and second memory 
devices of a preferred embodiment. 

Figures 4a, 4b, and 4c are schematic diagrams of a plurality of memory cells of a 
write-once memory device of a preferred embodiment. 

Figure 5 is a block diagram of a data storage system and memory device of 
another preferred embodiment. 



Figure 6 is an illustration of a memory array of a preferred embodiment in which 
part of a memory block is filled with a first file and the remainder of the block is filled 
with a second file. 

Figures 7a, 7b, and 7c are illustrations of how file structures of a file are reserved 
in a memory device of a preferred embodiment. 

Figures 8a and 8b are illustrations of how file system structures of a partition are 
reserved in a memory device of a preferred embodiment. 

Figures 9a and 9b are illustrations of a memory device of a preferred embodiment 
in which file system structures of two file systems are stored in a single memory partition. 

Figures 10a, 10b, and 10c are schematic diagrams of a plurality of memory cells 
illustrating a method of identifying memory cells storing data of a preferred embodiment. 

Figure 1 1 is an illustration of a memory device of a preferred embodiment having 
embedded error checking and correcting (ECC) code circuitry. 

Detailed Description of the Presently 
Preferred Embodiments 

Introduction 

Turning now to the drawings, Figure 1 shows a data storage system 10 coupled 
with a memory device 20. The data storage system 10 comprises a file system 15 
operative to read and write data from/to the memory device 20. A data storage system 
can take any suitable form and may, for example, be implemented as a digital camera, a 
digital audio player, a personal digital assistant, a game player, a cellular telephone, an 
electronic book, or a general-purpose programmable computer. The memory device can 
also take any suitable form and, in one presently preferred embodiment, takes the form of 
a three-dimensional write-once memory device. Suitable three-dimensional write-once 
memory devices are described in U.S. Patent No. 6,034,882, U.S. patent application serial 
number 09/560,626 (abandoned), and U.S. patent application Serial No. 09/638,428 
(abandoned), all of which are assigned to the assignee of the present invention and are 
hereby incorporated by reference. Further details regarding alternative structures for the 
memory device are presented in U.S. Patent Applications Serial Nos. 09/638,427 (now 



U.S. Patent No. 6,424,581) and 09/638,334 (now U.S. Patent No. 6,545,891), both of 
which are assigned to the assignee of the present application and are hereby incorporated 
by reference. 

Three-dimensional write-once memory arrays provide important economies in 
terms of reduced size of the memory array and associated reductions in manufacturing 
cost. The cost advantages are important in consumer products such as digital cameras, 
digital audio players, and electronic books. In these applications, the write-once memory 
array is preferably field programmable, and the data storage system field programs the 
memory array with a desired digital medium, such as a file of one or a sequence of 
images, a text file such as that suitable for an electronic book, or a digital audio file. 

The following preferred embodiments can be practiced with any suitable memory 
device, and the following claims shall not be read as requiring a write-once memory 
device or a three-dimensional write-once memory device unless specifically recited. 
Also, it should be noted that any or all of the following embodiments can be used alone or 
in combination. Further, definitions stated in one section of the detailed description apply 
equally to all sections. 

Turning again to the drawings, Figure 2 is an illustration of a memory array 
implemented in a memory device of a preferred embodiment. In this memory array, a 
plurality of memory cells are logically organized into lines, blocks, and partitions. In 
particular, this array is logically organized into Blocks 0 to N and divided into two 
partitions. Partition 1 contains Block 0 to Block 100, and Partition 2 contains Block 101 
to Block N. Figure 2 also shows that Block 0 contains a plurality of lines (Line 1 to Line 
M), each containing a data region and an error code region. In this preferred 
embodiment, the error code region is an error checking and correcting ("ECC") region, 
and the memory device comprises a hardware component that writes an ECC code in the 
ECC region for each line. The ECC region is preferably hidden from the file system so 
that data will only be written into the data region and not into the ECC region. 
Accordingly, if each block contains 64 lines with each line having an 8-byte data region 
and a 1-byte ECC region, the file system will be able to write 512 bytes of data to each 
block. It should be noted that while Figure 2 shows multiple lines, blocks, and partitions, 



a memory array can contain a single partition, a partition can contain a single block, and a 
block can contain a single line. 

Dynamic Line Sizing Embodiments 

In one preferred embodiment, the minimum number of memory cells that the file 
system can write into (i.e., the smallest writeable unit) is a single line. It should be noted 
that a file system "writes" into a memory cell regardless of whether the file system 
changes the initial digital state of the memory cell. For example, if the smallest writeable 
unit is 8 bytes, the file system "writes" 8 bytes of data even though some or all of the 
memory cells remain in their initial logic state after the write operation. Also, as noted 
above, the ECC region of a line is hidden from the file system so data will only be written 
into the data region and not into the ECC region. Accordingly, the smallest writeable unit 
in this preferred embodiment is the length of a line's data region (e.g., 8 bytes) — not the 
length of a line's data region and ECC region (e.g., 9 bytes). 

To ensure that the file system writes into only the smallest writeable unit of a 
memory device, it is preferred that the memory device comprise an indication of its 
smallest writeable unit (i.e., its line size) and provide this indication to the file system. 
The indication can be sent in response to a read command from the file system or can 
automatically be sent to the file system when the data storage system is powered-up or 
reset. The file system can receive this indication by sensing an electronic, mechanical, or 
optical feature of the memory device. For example, the indication can be provided in a 
register in the memory array or in a device identification code of the memory device. 
Further, the indication can be stored when the memory device is formatted or can be pre- 
written into the memory device by a manufacturer of the device. 

With this preferred embodiment, the file system dynamically responds to 
variability in an indicated minimum number of memory cells of respective memory 
devices by dynamically changing the minimum number of memory cells that the file 
system writes to a memory device. For example, Figure 3 shows a data storage system 50 
useable with first and second memory devices 60, 65. In this embodiment, the first and 
second memory devices 60, 65 take the form of modular, portable devices that are readily 
connected to and disconnected from the data storage system 50. The first memory device 



60 has a line size of 8 bytes, and the second memory device 65 has a line size of 16 bytes. 
As shown in Figure 3, when the first memory device 60 is coupled with the data storage 
system 50, the file system 55 is instructed to write no less than 8 bytes to the first memory 
device 60 during a write operation, while when the second memory device 65 is used, the 
file system 55 writes no less than 16 bytes during a write operation. 

One advantage associated with this preferred embodiment is that variability in the 
smallest writeable unit is taken care of by the file system itself — not by a driver 
associated with the memory device. Some data storage systems use a driver to facilitate 
communication between the file system and a memory device coupled with the data 
storage system. For example, memory devices using the CompactFlash™ standard 
require a CompactFlash™ driver, and memory devices operating under the 
SmartMedia™ standard require a SmartMedia™ driver. Typically, when a new memory 
device is released with a smallest writeable unit that is different from that programmed 
into the driver, a new driver must be released and installed in the data storage system 
before the new memory device can be used. Because the file system of this preferred 
embodiment dynamically responds to the smallest writeable unit indicated by a memory 
device, a memory device manufacturer can redesign the smallest writeable unit of its 
memory device without making a new driver available for the data storage system. In this 
way, the file system, unlike a driver, dynamically responds to variability between the 
smallest writeable units of two devices. 

Another advantage of this preferred embodiment relates to aligning stored data. 
For example, for simplicity, it may be preferred to align file structures (e.g., file name, 
description, and pointers) at the start of each line. If the file system were not informed of 
a memory device's smallest writeable unit, misalignment in the file structures may occur. 
For example, if the file structure is 8 bytes long, the file system would store two file 
structures on the 16-byte line of the second memory device 65 to maximize storage space. 
Because the second written file structure does not begin at the start of a line, the second 
file structure is not aligned with the first file structure. By informing the file system 55 
that the smallest writeable unit of the second memory device 65 is 16 bytes, the file 



system 55 only writes the first file structure on a single line and writes the second file 
structure on a separate line, thereby maintaining alignment between the file structures. 

Error-Code-Related Embodiments 

As noted above, in one preferred embodiment, each line of the memory array 
contains a first set of memory cells to store data (the data region) and a second set of 
memory cells to store an error code representing the data stored in the first set of memory 
cells (the error code region). While the error code used to illustrate this preferred 
embodiment is an error checking and correcting ("ECC") code, it should be noted that 
other types of error codes (such as parity bits) can be used as an error code. In operation, 
when data is stored in the data region of a line, an ECC code generator determines an 
ECC code that represents the data, and the error code is stored in the ECC region. An 
ECC code generator can be implemented in hardware and/or software in the data storage 
system or the memory device. For example, the file system can include software to 
generate ECC codes, or the memory device can include a hardware component that 
generates ECC codes. 

As described above, ECC code circuitry can be implemented external to or 
internal to the memory device. ECC code circuitry can impose an access time penalty 
approximately equivalent to 50-75 gate delays. Some memory devices implement ECC 
code circuitry in one or more chips separate from the memory device to avoid this 
penalty, which may degrade performance to an unacceptable level. Other memory 
devices, however, are optimized for high density and low cost and are not necessarily 
optimized for access speed. One such memory device is the three-dimensional, write- 
once electronic memory device discussed in U.S. Patent No. 6,034,882. With these 
memory devices, the delays associated with integrated ECC code circuitry are relatively 
unimportant, and the use of integrated ECC code circuitry may be preferred since 
manufacturing defects and/or age-related fatigue can raise the probability of bit errors. 

Turning again to the drawings, Figure 1 1 is an illustration of a memory device 200 
of a preferred embodiment. The memory device 200 can take any suitable form. In one 
preferred embodiment, the memory device 200 takes the form of a write-once memory 
device, while in another preferred embodiment, the memory device 200 takes the form of 
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a three-dimensional electronic memory device. Some examples of electronic memory 
devices include, but are not limited to, a semiconductor-transistor-technology-based 
memory device (e.g., CMOS, bipolar, SiGe, GaAs), a magnetic-based memory device 
(e.g., magnetic tunnel junction (MTJ) memories), and an organic-electronics-based 
memory device. An optical memory device (e.g., CD-ROM) can also be used. 

The memory device 200 of Figure 1 1 comprises a plurality of memory cells 210 
and ECC code circuitry 220 integrated with/embedded in the memory device 200. The 
ECC code circuitry 220 comprises an ECC code generator 230 and an ECC code decoder 
240. The ECC code generator 230 accepts n data bits to be stored in the memory cells 
210 as input and produces p ECC code bits as output. The n data bits are stored with the 
p ECC code bits as a k-bit word in the memory cells 210. Preferably the ECC code 
circuitry 220 implements a Hamming (k, n) code scheme (e.g., a Hamming (72, 64) code 
scheme). 

When the k stored bits are retrieved from the memory cells 210, they are fed 
through the ECC code decoder 240. The ECC code circuitry 220 compares the parity bits 
computed from k (out of n) retrieved bits and compares those parity bits with the ones 
stored. If there is a mismatch, the ECC code circuitry 220 corrects the error (if one bit). 
The n corrected data bits are then outputted by the ECC code decoder 240. With a 
Hamming (72, 64) code scheme, the 8 ECC code bits are used to identify and correct any 
single-bit error in the 72-bits of stored data. (The presence of two errors in the 64-bit 
word can be determined but not corrected.) Accordingly, the Hamming (72, 64) code 
scheme permits the memory device 200 to tolerate one defective bit out of every 72 bits. 
This defect rate (about 1 .4%) exceeds the defect percentages encountered in typical 
integrated circuit manufacturing. 

In one preferred embodiment, the data bits and ECC code bits are stored in 
memory cells using the distributed data strategy described in U. S. Patent Application 
Serial Number 09/747,574 (now U.S. Patent No. 6,591,394), filed on the same date as the 
present application. That application, which is assigned to the assignee of the present 
invention, is incorporated by reference herein. U.S. Patent Application Serial Number 
09/748,649 (now U.S. Patent No. 6,661,730), which is also assigned to the assignee of the 



present invention and incorporated by reference herein, provides additional information 
concerning these concepts. 

As described above, an ECC code generator implements an algorithm (preferably 
based on the Hamming Code) to generate an output using the data to be stored in the data 
region as input. When data is written into and/or read from the data region, the 
written/read data is compared to the ECC code. For example, when data is read from the 
data region, the ECC generator can generate an ECC code based on the read data and 
compare that newly-generated ECC code with the ECC code stored in the ECC region. 
An error indication is provided to the data storage system if the ECC codes do not match. 
The ECC codes can then be decrypted to determine which bit(s) in the data is incorrect so 
that the erroneous bit(s) can be corrected. There are situations, however, where a 
mismatch between the newly-generated ECC code and the ECC code stored in the ECC 
region does not indicate an error. One such situation can occur with write-once memory 
devices. 

In spite of its many advantages, a write-once memory array provides the 
disadvantage that a memory cell cannot be erased once it is written into. Accordingly, it 
is not possible to erase files from a write-once memory array by restoring the associated 
memory cells to their initial, un-programmed digital state (e.g., Logic 0). Novel methods 
for deleting stored data from write-once memory devices are presented in U.S. Patent 
Application Serial No. 09/638,439 (now U.S. Patent No. 6,658,438), filed August 14, 
2000, which is assigned to the assignee of the present invention and is hereby 
incorporated by reference. As described in that patent application, data can be deleted 
(i.e., made difficult or impossible to read) by overwriting at least a portion of the stored 
data with a destructive pattern. This destructive pattern switches at least some of the 
memory cells associated with the stored data from an original, un-programmed state to a 
programmed state. For example, some or all of the memory cells associated with stored 
data can be over- written with the destructive pattern (111111). Any suitable destructive 
pattern (periodic or aperiodic) that achieves the desired result of obliterating the data can 
be used. 
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Figures 4a through 4c provide a specific example of this operation for a write- 
once memory. Figure 4a shows data (1001 1001) stored in the data region of a line. The 
error code representing the data (00101) is stored in the ECC region. To delete or 
obliterate this data, the destructive pattern (10101010) shown in Figure 4b is written into 
the data region of the line. Because the memory device is a write-once device, only the 
un-programmed bits are affected by this write operation. Accordingly, the data stored in 
the data region after the destructive pattern is written is the OR of the original data 
(1001 1001) and the destructive pattern (10101010). The result (101 11011) is shown in 
Figure 4c. When the destructive pattern is written into the data region, the error code 
representing that pattern ((1 1000), as shown in Figure 4b) is also written into the ECC 
region of the line. However, because only un-programmed bits are affected by a write 
operation in a write-once memory device, the resulting error code in the ECC region will 
be the OR of the original ECC code (00101) and the ECC code of the destructive pattern 
(1 1000). The result ((1 1 101), shown in Figure 4c), however, does not represent the data 
stored in the data region (10111011). Accordingly, a comparison of the ECC code with 
the data stored in the data region will indicate a false error. Such a false error may have 
the undesired effect of re-writing or correcting the data properly stored in the data region. 

To overcome this problem, it is preferred that the file system disregard the error 
code for "deleted" data. For example, an indication that the data is deleted can be stored 
by the file system in the form of a flag bit designated in a file listing or an entry stored in 
a table of deleted data. In this way, to determine whether data is deleted data, the file 
system determines whether such an indication was stored. Alternatively, the file system 
can recognize deleted data by recognizing that the data stored in the data region is the 
destructive pattern. For example, if the destructive pattern is a series of l's, the resulting 
data will also be a series of Ts. If the error codes do not match in this situation, it is 
likely that the data is deleted data, and the file system can disregard the error code. 
"Disregard the error code" is intended to broadly refer to any act or omission that 
prevents the undesired effect of re-writing or correcting the data properly stored in the 
data region. For example, an error code can be disregarded by disabling a comparison of 
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the data stored in the data region with the error code or can be disregarded by ignoring an 
error resulting from such a comparison. 

It is should be noted that the set of memory cells can be other than a data region of 
a line. For example, the set of memory cells storing data can be a block of lines. Also, 
while the error code region was associated with a single line in the above-described 
preferred embodiment, an error code region can be associated with a block of lines or 
with a file. Further, the term "set" is intended to refer to one or more, and the un- 
programmed digital state can be either Logic 0 or Logic 1 (or Logic 2 in a three-state 
digital system). 

Micro-Allocator Embodiments 

As described above, in one preferred embodiment, the memory device is logically 
organized into a plurality of blocks, each block comprising a plurality of lines. The term 
"block" as applied to memory cells refers to a contiguous set of memory cells. With 
reference to Figure 5, to store a file in a memory device 70, an allocator 75 of a file 
system 80 determines the size of the file that is to be stored and allocates an appropriate 
number of blocks in the memory device 70 for storing the file. As shown in the example 
illustrated in Figure 6, Blocks 1-4 are allocated for a first file. Although four blocks are 
allocated, the first file may not completely fill one of the blocks. This may occur, for 
instance, with a small file or with a large file that has been segmented into smaller 
portions. This may also occur with a small remainder of a file after it has already filled 
other blocks, as illustrated in Block 4 of Figure 6. The first file only partially fills Block 
4, leaving Lines 4-6 available. Because the allocator 75 only allocates memory in block 
units, when a second file is to be stored in the memory device 70, the allocator 75 
allocates additional blocks for the second file (e.g., Blocks 5-10) and leaves the available 
space in Lines 4-6 of Block 4 unfilled. 

To prevent wasting of available memory space, it is preferred that the file system 
80 comprise a micro-allocator 85 to keep track of a block (preferably, each block) and 
report which lines have been used (or which lines are available) to a block-tracking 
device such as an allocation table. This provides the advantage of using lines that 
otherwise would have been wasted. With the use of a micro-allocator 85, available Lines 
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4-6 can be used to store a second file, as shown in Figure 6. If there are remaining 
portions of the second file to be stored, the allocator 75 would then determine the size of 
the remaining portions and allocate an appropriate number of blocks in the memory 
device 70. The remaining portions of the second file would then be stored in the 
allocated blocks, with the micro-allocator 85 determining which lines are available in the 
allocated block. As is clear from this example, the term "file" refers to either a complete 
file or a portion of a file, such as the portion of the first file stored in Lines 1-3 of Block 
4. 

In an alternate embodiment, instead of allocating blocks in the memory device 70 
itself, the allocator 75 can allocate blocks in a memory cache 90 (e.g., RAM) of the data 
storage system 95. In this way, data can be cached prior to actually committing it to the 
memory device 70. In this embodiment, the allocator 75 would allocate blocks held in 
the cache 90, the micro-allocator 85 would track line usage of the cached block, and the 
file system 80 would store the cached data in the memory device 70 when the cached 
block is full. Use of this alternate embodiment may be especially desired when the 
memory device 70 takes the form of a write-once memory device. Because stored data 
cannot be over- written in a write-once memory device, the file system cannot re-organize 
stored data as it can with a write-many memory device. By using this preferred 
embodiment, the allocator 75 can allocate a number of blocks into the cache 90, and the 
file system 80 can use the cache 90 as a workspace in which to write and re-write data. 
For example, if the blocks of Figure 6 were allocated in the cache 90, the file system 80 
could move Lines 4-6 of Block 4 to another block closer to the remainder of the second 
file. The micro-allocator 85 could then indicate that Lines 4-6 were available for 
additional data. After those lines are filled, the file system 80 could store Block 4 in the 
write-once memory device. Of course, a cached block can be written to the memory 
device before the cached block is filled. 

"Skid Pad" Embodiments 

As described above, when a file is stored to the memory device, the allocator 
determines how many blocks to allocate in the memory device. After the file is stored, 
the file system stores a file structure for that file in the memory device. The term "file 
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structure" is intended to refer to data that describes a file. In one embodiment, a file 
structure describes a file and how a file system can use the file. For example, a file 
structure can describe the name, type, location, size, and other attributes of a file, as well 
as the type of commands that a file system can or cannot use with that file. For instance, 
a file structure can indicate that a file is "read-only" and, accordingly, cannot be modified 
by a file system. As another example, the file structure can be a file "footer," which can 
be a data pattern indicating that the file stored in the block is complete or a pointer to a 
memory location storing the next portion of the file (or to a table storing such a pointer). 
Of course, other file structures in addition to these examples can be used. 

Because file structures are written after a file is stored in memory, problems can 
arise with write-once memory devices if all of the allocated space for that file is filled 
before the file structures can be written. For example, if the data storage system records a 
digital representation of streaming data (e.g., voice data), the streaming data can fill the 
entire allocated memory space, leaving no room for file structures. Because file 
structures have not been written, when the file system reads the stored data, it will not 
know whether the file is complete or where to look for the additional portions of the file. 
A similar problem is encountered if a catastrophic failure occurs during the write 
operation (such as a power failure or a user removing the memory device from the data 
storage system). With a write-many memory device, the file structure can be stored at 
another memory location, and the file system can later re-organize the stored data to place 
the file structure with the stored file. However, this re-organization is not possible with 
write-once memory devices. 

To overcome this difficulty, when the file system writes a file to a block (or any 
other type of contiguous set of memory cells, such as a line), the file system preferably 
reserves at least one memory cell in the block for file structures for that file. In this way, 
the file system creates a "skid pad" in the block for the file structures. It is preferred that 
this "skid pad" not be visible to an end user so that files too large to fit in the unreserved 
memory cells will not be attempted to be written into the reserved memory space. 

The use of a "skid pad" will now be illustrated in conjunction with Figures 7a - 
7c. As shown in Figure 7a, Line 6 of a block is reserved for file structures of a file to be 
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saved in that block. The number of memory cells reserved for file structures can be 
determined by the file system. When a file is stored in the block, only those lines that are 
not reserved for the file structures are used to store the file (Lines 1-5). If the file is more 
than five lines long, the file structure for the file is stored in Line 6, as shown in Figure 
7b. If the file structure can be stored in the unreserved memory cells, the reserved 
memory cells can be used to store other data. For example, if Line 6 in Figure 7a were 
reserved for the file structures of a first file and the file system were able to save file 
structures for the file in an unreserved line (as shown in Figure 7c), Line 6 can be used to 
store other data. In Figure 7c, Line 6 is "re-used" as reserved space for the file structures 
of a second file being stored to that block. 

The "skid pad" concept can also be used for file system structures. Whereas a file 
structure refers to data that describes a particular file, a "file system structure" refers to 
any data that describes a partition in memory, the memory space within the partition, 
and/or the type of commands that a file system can or cannot use with that partition. For 
example, a file system structure can be data describing where a file resides and can be 
used by a file system to find that file or free memory cells in a memory device. As 
another example, a file system structure can indicate that a partition is "closed" and, 
accordingly, cannot be modified by a file system. A file system structure can take the 
form of an allocation table, a listing of stored files, a search tree, a boot block, a partition 
header, a partition footer, a description of contents of the memory device, and 
configuration information, as well as a listing of the file structures of the files stored in a 
partition. Of course, other file system structures in addition to those listed above can be 
used. Figures 8a and 8b illustrate this embodiment. When the file system creates a 
partition in the memory device, the file system reserves at least one memory location for 
file system structures of the partition (here, the first and last block of the partition). The 
file system stores files in the partition in any unreserved memory location, as shown in 
Figure 8b. In this way, if the partition is completely filled with files, there will be room 
for file system structures of the partition. Further, a file system may expect to find file 
system structures at certain memory locations. Reserving space in the memory for file 
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system structures ensures that other data (such as a file) will not be written into those 
locations. 

Multiple-File-Svs tern-Structures Embodiments 

In another preferred embodiment, a memory device is presented where file 
systems structures for two or more different file systems are stored in the same partition 
of a memory device, such as the memory device shown in Figure 9b. Preferably, a 
partition comprises a set of memory cells with a single addressing scheme. By storing 
file systems structures for multiple file systems in the same partition of a memory device, 
the memory device can be read by a larger number of media readers. For example, a data 
storage system such as a digital camera can store file system structures for multiple file 
systems to ensure that pictures stored on the memory device can be read by a prominent 
file system. In operation, once the memory device is filled with pictures and file system 
structures of one file system are stored in the memory device, the digital camera can 
"close" the memory device by storing file system structures of additional file systems. 
For example, the camera can store DOS FAT file structures (e.g., FAT Table, boot sector, 
etc.) so that the memory device can be read on any DOS reader as well as a reader using 
the primary file system. 

The file system structures for the additional file systems can be written to the 
memory device in response to a request from a user, such as when the user provides an 
indication to the data storage system that he does not want to store any more data on the 
memory device. In response to this indication, the file system or another application of 
the data storage system can add the file system structures for the other file systems. 
Alternatively, the file system can automatically write the additional file system structures 
when the file system detects that the memory device is full or virtually full. 

With write-once memory devices, if the locations for file system structures of a 
file system are written with data, the file system structures of that file system will not be 
able to be written onto the memory device. Accordingly, to leave open the option of 
writing additional file system structures of other files systems, the "skid pad" concept 
discussed above can be used. That is, after a partition is created in the memory device, 
memory cells are reserved in the appropriate locations in the partition for file system 
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structures of the additional file systems. As an example, if one wanted to close the 
memory device to be DOS FAT compatible, the first address of the memory device would 
be reserved for the boot sector structure. As a simplified example of this, consider 
Figures 9a and 9b. Figure 9a shows that Block 0 in Partition 1 is reserved for file system 
structures of a first file system and that Block 100 in Partition 1 is reserved for file system 
structures of a second file system. The file system structures of the first and second file 
systems are later stored in their respective reserved locations, as shown in Figure 9b. 
While Figure 9b shows file system structures of two file system stored in a single 
partition in the memory device, it should be noted that file system structures of more than 
two file systems can be stored. 
Closing-the-Media Embodiments 

In another preferred embodiment, data stored on a memory device, such as a file 
or a partition, is permanently prevented from being modified (i.e., the data is "locked" or 
"closed"). In many situations, it is desirable to modify data stored in a memory device. 
However, there are other situations in which one wishes to prevent the stored data from 
ever being modified. For example, consider the situation in which a memory device 
stores executable code (e.g., for a video game or a digital book) in one partition and user 
information (e.g., for high scores or notes) in another partition. In this situation, it may be 
desired to prevent the executable code from being modified. As another example, it may 
be desired to prevent user-stored information (such as a picture taken with a digital 
camera) from being erased or changed once it is stored. Some re-writeable media, such 
as hard disks, can store a read-only or an archive flag along with data that is to be 
protected from modification. However, because such flags can removed, this method of 
protection does not ensure that the data will never be modified. Further, the use of write- 
once media alone does not ensure permanent protection of data because, as described 
above, stored data can be modified by overwriting the data with a destructive pattern (i.e., 
switching memory cells from an un-programmed to a programmed state). 

In one preferred embodiment, a file is permanently prevented from being modified 
by storing an indicator in a file structure of the file. Any file system reading that file 
structure would be prevented from modifying the file and would be programmed to 
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prevent modification or removal of the indicator. Alternatively, if a write-once memory 
device is used, the media itself ensures that the indicator is non-modifiable if the indicator 
is in a programmed state. In another preferred embodiment, a partition is permanently 
prevented from being modified by permanently preventing the file system from allocating 
memory cells in the protected partition. In one implementation, the file system's 
allocator is disabled, thereby preventing the file system from allocating any blocks of 
memory in the partition. In another implementation, the file system's allocator is 
replaced by another allocator that is given no space to allocate. Similar to protecting 
files, a partition can be permanently protected by storing an indicator in a file system 
structure of the partition, and a file system reading that file system structure would be 
prevented from modifying the partition. As above, a file system can be programmed to 
prevent modification or removal of this indicator or, if a write-once memory device is 
used, the media itself ensures that the indicator is non-modifiable if the indicator is in a 
programmed state. With these preferred embodiments, the protected data (files or 
partitions) is permanently and finally "locked" or "closed." 
Temporal-to-Spatial Mapping Embodiments 

Turning again to the drawings, Figures 10a- 10c illustrate a method for identifying 
memory cells storing data in a memory device of a preferred embodiment. This method 
provides the advantage of locating stored data when the location of the data is not known 
to the file system a priori. Figure 10a shows a set of memory cells. The first line of 
memory cells stores data (1 101), and the remaining five lines of memory cells store an 
identification pattern (0000). Figure 10b shows additional data (1 110) stored in the 
second line of memory cells (i.e., between the memory cells storing the previously-stored 
data (1 101) and the memory cells storing the identification pattern (0000)) by overwriting 
the identification pattern stored in the second line. To identify the memory cells that 
store the newly-written data (1110), the file system identifies those cells that are adjacent 
to the memory cells storing the identification pattern. For example, the file system can be 
programmed to identify the memory cells that are within a predetermined number of 
memory cells adjacent to the memory cells storing the identification pattern {e.g., four 
memory cells or one line). Alternatively, the file system can be programmed to identify 



18 



the memory cells that are between two sets of memory cells storing the identification 
pattern. For example, in Figure 10c, data (0110) and (1001) are identified because they 
are located between the memory cells storing the identification pattern (0000) in the third 
and sixth lines of the memory array. 

This method for identifying memory cells provides particular advantages for 
write-once memory devices. These advantages will be discussed in terms of storing data 
describing a file. It should be noted that the method and its associated advantages are 
equally applicable to other applications. File listings in a memory device often store the 
name and attributes (such as date and time created, read-only, executable, etc.) of a file 
and a pointer listing the address where the file is actually contained in the memory. If the 
file is later moved in memory, the file system simply writes the new address of the file 
over the old address of the file. Similarly, if a new file is later stored at the address 
indicated by the pointer, the file system can write the name of the new file over the name 
of the old file. Accordingly, if data changes after it is stored, the modified data is written 
over the previously-stored data at the same location. This technique of modifying data 
will be referred to as temporal mapping — although data changes at a later time, its 
location remains the same. For this reason, the file system knows exactly where to locate 
data. For example, the pointer to a specific file will always be in the same location 
regardless of whether the pointer to that file changes. 

Because a write-once memory device cannot re-write over a previously-written 
location, the temporal mapping technique described above cannot be used with a write- 
once memory device. Instead, new data is written to a new location. When new data is 
written, it is preferred that the old data be deleted using the deletion method described 
above and in U.S. Patent Application Serial No. 09/638,439, filed August 14, 2000 (now 
U.S. Patent No. 6,658,438, to ensure that the file system does not recognize the original 
data (e.g., pointers) as the current data. To determine the location of the new data, it is 
preferred that the identifying technique described above be used. This technique will be 
referred to as spatial mapping (in contrast to temporal mapping) — when data changes at 
a later time, its location also changes. 
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Turning again to Figures 10a- 10c, data (1101) represents a pointer to a particular 
file. Here, the memory cells storing the identification pattern are all in an un- 
programmed logic state (e.g., Logic 0). When the location of the file changes, a new 
pointer (1 1 10) is written to the memory device (see Figure 10b) by overwriting the 
identification pattern in the next available line. To identify the location of the new 
pointer, the file system locates the memory cells that are adjacent to the memory cells in 
the un-programmed Logic 0 state. That is, the file system recognizes the string of zeros 
to mean that the data stored before the string of zeros is the current data. In this way, 
writing new pointers over existing zeros, while leaving more zeros at the end of the 
memory cells, allows the file system to recognize which pointers are the most current. In 
essence, the task of finding the most current data reduces to merely finding the last 
nonzero entry in the memory cells. If the entire set of memory cells storing an 
identification pattern is overwritten, additional modifications may not be possible. To 
avoid this situation, it is preferred that the pointer point to an additional pointer tree 
(instead of to the file itself) to increase the number of modifies that can occur. 

In the preceding example, it was assumed that the file system was programmed to 
identify a line of data that is adjacent to the memory cells storing the identification 
pattern. In this way, the identified data was of a predetermined size (i.e., a predetermined 
number of memory cells, such as a line). To identify data of a variable size, the file 
system can be programmed to identify memory cells that are between two sets of memory 
cells storing the identification pattern, as shown in Figure 10c. Additionally, when the 
old data is deleted with a destructive pattern that results in a predetermined pattern of data 
being stored in the old location (e.g., a string of ones), the file system can be programmed 
to identify the memory cells that are between a set of memory cells storing the 
predetermined pattern of data (e.g., the string of ones) and a set of memory cells storing 
the identification pattern (e.g., the string of zeros). In this situation, the file system is 
preferably programmed to ignore the predetermined pattern rather than recognize it as 
valid data. 

Although the spatial mapping technique was illustrated above in conjunction with 
file descriptors and pointers, this technique can be used in any other suitable application 
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in which data is updated. For example, this technique can be used in a calendaring 
application (where entries to a particular time or date in a calendar change over time) or 
in a picture editing application (where new picture are stored) run by a data storage 
system coupled with the memory device. The above description of the operation and 
advantages of this technique applies equally to these other applications. Additionally, 
while the preceding illustration used a string of 0s as an identification pattern, other 
identification patterns can be used to achieve the desired result of identifying stored data. 
For example, instead of the identification pattern being a string of memory cells in their 
un-programmed logic state (e.g., Logic 0), the identification pattern can be a string of 
memory cells, some of which are in their un-programmed logic state and some of which 
are in a programmed logic state (e.g., (001 1)). 

In another preferred embodiment, the location of data stored in a first set of 
memory cells of a memory device is identified by an identifier that is stored adjacent to 
the data. For example, an identifier can be stored in the middle or at an end (the 
beginning or the end) of the stored data. The identifier would instruct the file system how 
much memory on one or both sides of the identifier is data. The identifier can be fixed or 
dynamic. For example, instead of using the same identifier each time new data is written 
to the memory device, the identifier can change to indicate that new data is being written 
or to indicate how many times new data has been written to the memory device. In one 
embodiment, the length of the identifier changes with each new data write, while in 
another preferred embodiment, data stored in the identifier itself changes. For example, 
an incrementing, multiplying, or incrementing alternating pattern can be used to provide 
the indication. In yet another preferred embodiment, the identifier is added to the end of 
the stored data indicating whether the stored data is valid or invalid. For example, one bit 
can be added to a line or block. If the bit is not present, the file system would know that 
the preceding data is valid. Conversely, if the bit is present, the file system would ignore 
the data. 

The forgoing detailed description has described only a few of the many possible 
implementations of the present invention. For this reason, this detailed description is 
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intended by way of illustration, and not by way of limitation. It is only the following 
claims, including all equivalents, that are intended to define the scope of this invention. 



